According to reports, a security researcher discovered a vulnerability in the GroupMe web application that allowed unauthorized access to user accounts and sensitive information. The vulnerability, which has since been patched, was related to authentication and session management.